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Abstract —Network coding is an efficient means to improve 
the spectrum efficiency of satellite communications. However, its 
resilience to eavesdropping attacks is not well understood. This 
paper studies the confidentiality issue in a bidirectional satellite 
network consisting of two mobile users who want to exchange 
message via a multibeam satellite using the XOR network coding 
protocol. We aim to maximize the sum secrecy rate by designing 
the optimal beamforming vector along with optimizing the return 
and forward link time allocation. The problem is non-convex, 
and we find its optimal solution using semidefinite programming 
together with a 1-D search. For comparison, we also solve 
the sum secrecy rate maximization problem for a conventional 
reference scheme without using network coding. Simulation 
results using realistic system parameters demonstrate that the 
bidirectional scheme using network coding provides considerably 
higher secrecy rate compared to that of the conventional scheme. 

Index Terms —Physical layer security, network coding, bidi¬ 
rectional satellite communications, secrecy rate, semidefinite 
programming. 


I. Introduction 

Satellite communications (SATCOM) is getting more and 
more integrated into communication networks to compliment 
the current terrestrial communication systems. Satellite ser¬ 
vices have to support increasing demands for data transfer. 
To realize bidirectional satellite communications, traditionally 
orthogonal resources either in frequency or time domain 
should be used to avoid interference between users. To save 
the precious wireless resources, network coding has been used 
in this work as an efficient protocol to exchange information 
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between two mobile satellite users. The basic principle is 
that the received information from users are combined on 
the satellite or gateway (GW), and then the mixed signal 
is broadcast to users at the same time and using the same 
frequency. Because each user can subtract its own message, it 
can easily decode the message from the other user. 

However, due to the broadcast nature and immense area 
coverage, satellite communications systems, e.g., in military 
and commercial applications, are vulnerable to security attacks 
such as eavesdropping. Currently, security in SATCOM is 
achieved at upper layers by means of encryption such as 
the Advanced Encryption Standard Nevertheless, 

traditional security is based on the assumption of limited 
computational capability of the malicious nodes, and thus there 
exists the risk that a malicious node can successfully break 
an encryption, and get access to sensitive satellite data (3j. 
In contrast to the upper layer encryption techniques, recently 
there has been significant interest in securing wireless commu¬ 
nications at the physical layer using an information-theoretic 
approach named “secrecy rate” 0 - The main advantage of this 
approach is that the malicious nodes cannot even get access 
to protected information regardless of their computational 
capabilities. 

While network coding can greatly improve the system 
throughput, whether it is more secure than the conventional 
scheme, which does not use network coding, is largely un¬ 
known in SATCOM. In this work, we will leverage the 
physical layer security approach to address the confidentiality 
issue in bidirectional SATCOM using the principle of network 
coding. Below, we provide an overview on the applications 
of network coding to SATCOM and the related work in the 
physical layer security literature. 

A. Literature Review 

1) Network coding related works: Network coding tech¬ 
nique, first introduced in Q, can considerably reduce delay, 
processing complexity and power consumption, and can sig¬ 
nificantly increase the data rate and robustness [j6|. In the 
popular XOR network coding scheme, the received signals 
at an intermediate node are first decoded into bit streams, and 
then XOR is applied on the bit streams to combine them. The 
processed bits are re-encoded and then broadcast. Utilization 
of network coding has been studied in both terrestrial and 
satellite networks. The authors in |7] apply superposition cod¬ 
ing and XOR network coding to a bidirectional terrestrial relay 
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network. A multi-group multi-way terrestrial relay network 
is considered in (8| where superposition coding and XOR 
network coding are investigated and compared to each other. 
Network coding can also considerably improve the spectral 
efficiency in bidirectional SATCOM in which two mobile 
users exchange information via the satellite. The work in (9]] 
compares the amplify-and-forward (AF) method with the XOR 
network coding scheme in a satellite scenario. A joint delay 
and packet drop rate control protocol without the knowledge 
of lost packets for mobile satellite using network coding is 
studied in flQj j. In ED' buffers are designed for satellites 
when the network coding scheme is employed. Random lin¬ 
ear network coding is used in 0 to minimize the packet 
delivery time. Satellite beam switching for mobile users is 
tackled in (13) where the network coding scheme increases the 
robustness in delivery of the packets when mobile terminals 
move from beam to beam. The XOR network coding protocol 
is demonstrated in a satellite test bed in m- 

2) Physical layer security related works: Wyner in (4) first 
showed that secure transmission is possible for the legitimate 
user given the eavesdropper receives noisier data compared 
to the legitimate receiver. Inspired by Wyner’s work, [15] 
extended the idea of physical layer secrecy rate from the 
discrete memoryless wiretap channel to Gaussian wiretap 
channel. The Wyner’s wiretap channel was generalized in (16) 
to the broadcast channel. After the seminal works done in |4J, 
0, 0, there have been substantial amount of works in 
physical layer secrecy. Here, we only review those most 
relevant to network coding and bidirectional communications. 
The authors in 0 consider a relay utilizing the XOR network 
coding protocol where joint relay and jammer selection is done 
to enhance the secrecy rate. A bidirectional AF relay network 
with multiple-antenna nodes is considered in (TS) where the 
relay beamforming vector is designed by the waterfilling 
method to improve the secrecy rate. The authors in [191 
consider random relay selection in a bidirectional network in 
which the relay performs both data transmission and jamming 
the eavesdropper at the same time to increase the secrecy. The 
work in (20) performs selection over AF relays and jammers 
in a bidirectional network for the single-antenna case, and pre¬ 
coding in the multiple-antenna case to enhance the secrecy. To 
maximize the secrecy in a bidirectional network, the authors 
in 0 consider the location and distribution of nodes while 
joint relay and jammer selection is performed. Distributed 
beamforming along with artificial noise and beamforming is 
studied in (22) for a bidirectional AF relay network. The work 


in [231 designs the distributed beamforming weights for a 
bidirectional network where one intermediate node acts as 
a jammer. In contrast to the terrestrial literature, there are 
very few works in physical layer security for SATCOM. The 
problem of minimizing the transmit power on a multibeam 
satellite while satisfying a minimum per user secrecy rate 
is studied in (24) . Iterative algorithms are used to jointly 
optimize the transmission power and the beamforming vector 
by perfectly nulling the received signal at the eavesdropper. 
Both optimal and suboptimal solutions are developed in [251 
where the use of artificial noise is also studied. 

Despite the physical layer security and network coding 


works in the terrestrial and SATCOM scenarios, some un¬ 
addressed issue are left. In (7), only downlink bottlenecks 
are considered when designing the beamforming weights for 
the XOR network coding case. The uplink bottlenecks also 
need to be considered when optimizing the uplink-downlink 
time allocation. In [8), the authors consider the decoding-re- 
encoding and designing the beamforming vector separately. 
The works in 0, 0 consider single-antenna relay where 
the AF protocol is used in a bidirectional network. The authors 
in 0, 0, 0 use the analog network coding protocol 
in a two-way relay network to facilitate secure information 
exchange between two users. Furthermore, the mentioned 
terrestrial works in physical layer security for bidirectional 
communications assume one eavesdropper in the environment. 
The works in (24) , (25) design the beamforming weights for 
unidirectional service for fixed users in the forward link (FL). 

B. Our Contribution 

In this work, we study the network coding based bidirec¬ 
tional SATCOM in which two mobile users exchange data 
via a transparent multibeam satellite in the presence of two 
eavesdroppers. There is an eavesdropper present for each user 
who overhears the bidirectional communications. The users 
employ omnidirectional antennas and the communication is 
prone to eavesdropping in both the return link (RL) and FL. In 
the RL, two users send signals using two orthogonal frequency 
channels; the signals collected by the satellite are passed to the 
GW, where they are decoded, XOR-ed and then the produced 
stream is re-encoded. This combined stream is multiplied by 
the beamforming vector which contains the designed weight 
of each feed. Consequently, each element of the resultant 
vector is transmitted to the satellite using the feeder link. 
Each element which includes both the feed weight and the 
data signal is applied to the corresponding feed to adjust the 
beams for broadcasting to both users simultaneously in the 
FL. This scheme is more power-efficient than the conventional 
method where network coding in not utilized and the power is 
splitted into two data streams. This benefit is extremely vital 
for SATCOM because of the limited on-board power. 

Our main contributions in this work are summarized below 
to differentiate it from the prior work: 

1) We incorporate XOR network coding into SATCOM in 
order to enable both efficient and secure bidirectional 
data exchange. 

2) The end-to-end sum secrecy rate is first derived, and 
then maximized by designing the optimal beamforming 
vector and the RL and FL time allocation. The optimiza¬ 
tion problem regarding the beamforming vector is solved 
using semi-definite programming (SDP) along with 1-D 
search. 

3) We provide comprehensive simulation results to demon¬ 
strate the advantage of the bidirectional scheme over the 
conventional scheme using realistic SATCOM parame¬ 
ters. 

The remainder of the paper is organized as follows. In 
Section [H] we introduce the SATCOM network topology as 
well as deriving the signal model and defining the secrecy 
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rates. The problems for maximizing the sum secrecy rate are 
debited and solved in Section m In Section |IV[ numerical 
results are presented. The conclusion is drawn in Section [V] 
Notation: Upper-case and lower-case bold-faced letters are 
used to denote matrices and column vectors, respectively. 
Superscripts (-) T and (■) n represent transpose and Hermitian 
operators, respectively. I nxn denotes an N by N identity 
matrix. CAf(m , K) denotes the complex Gaussian distribution 
with mean vector m and covariance matrix K. A max (A, B) is 
the maximum eigenvalue of the matrix pencil (A,B). A >; 0 
means that the Hermitian matrix A is positive semidebnite. 
|| • || is the Frobenius norm and | • | represents the absolute 
value of a scalar. 

II. System Model 

Consider a satellite communication system comprised of 
two users denoted by U\ and U 2 who exchange information 
with each other, one multibeam transparent satellite denoted 
by S, one GW, two eavesdroppers denoted by Ei and E 2 as 
depicted in Fig. |T| Users are located in different beams of 
the satellite, and they transmit the RL signals using differ¬ 
ent frequency channels simultaneously. We assume that each 
user and each eavesdropper is equipped with a single omni¬ 
directional antenna. Because of the long distance between 
the users, there is no direct link between them; furthermore, 
eavesdroppers cannot cooperate and Ei can only overhear Ui 
for i = 1,2. Contemporary orbiting satellites such as ICO, 
SkyTerra, and Tliuraya have limited power, here debned as 
Ps, and some of them do not have the on-board processing 
ability to decode the received messages or perform on-board 
beamforming, so they have to forward the received signal to 
the GW to get it processed |26)-[28||. Using the GW to process 
the signal and designing the feed weights is referred to as 
the ground-based beamforming technique. The ground-based 
beamforming technique is perceived as the most convenient 
and economical approach (28) . In this paper, we consider 
a commercial satellite without digital processing ability and 
follow the ground-based beamforming paradigm. 

In our satellite network model, we assume that the eaves¬ 
dropper is a regular user which is part of the network. 
However, it is considered as an unintended user, potential 
eavesdropper, which the information needs to be kept secret 
from it. Due to the fact that the eavesdropper is part of the 
network, it is possible to estimate the channels to it. Hence, 
similar to the works [ 291 |33). we assume that the eaves¬ 
dropper’s channel state information (CSI) is known. Based 
on the mentioned assumption, we assume that the users and 
eavesdropper know all the CSIs. Further, all communication 
channels are known and bxed during the period of communi¬ 
cation. It is worth mentioning that in the secrecy rate analysis 
of XOR network coding, only the CSI of the eavesdroppers 
in the RL is required. Although we assume the availability of 
the eavesdropper’s CSI, there are methods such as null-space 
artihcial noise transmission (34) , random beamforming (35)- 
|37), or effective channel coding design to strengthen the 
cryptography [38j in order to sustain secrecy without having 
the knowledge of the eavesdropper’s CSI. Another alternative 



can be using the statistical knowledge of the eavesdropper’s 
CSI in order to improve the secrecy (39)-(42). Also, the 
interference alignment technique can be used along with 
statistical knowledge of the eavesdropper’s CSI to enhance 
the secrecy |43j. In the situations when the geographical area 
of the eavesdropper is known, the worst-case scenario can be 
considered. In this scenario, the best CSI from the user to the 
eavesdropper’s area is considered for the design. One possible 
example for the worst-case scenario can be when the occupied 
zone by the enemy is known. This example can be one of the 
applications of this paper. 

To acquire the RL channel state information (CSI) at the 
GW, the users send the pilot signals along with the data 
toward the satellite. For the FL CSI, the GW sends pilots to 
the users. Afterwards, the estimated CSI by the users is sent 
back to the GW. Therefore, getting the FL CSI takes more 
time compared to the RL CSI (44) . The GWs are equipped 
with advanced transceivers and antennas and because of this 
reason, the communication link between the GW and the 
satellite (feeder link) is modeled as an ideal link. Hence, 
similar to the works (27), (45)-f48) which are carried out 
in the satellite communications literature, we assume that the 
channel between the satellite and the GW, which is referred 
to as the feeder link, is ideal with abundant bandwidth. 

The complete communication phases of the network coding 
based scheme are summarized in Table Q] The conventional 
scheme without using network coding is also included for 
comparison and details are given in Section |H-B| The first two 
phases for the RL are the same for both schemes while the 
main difference lies in the FL transmission. In the conventional 
scheme, signals are sent in different time slots for each user 
in the FL, so this scheme has less available transmission time 
for each user. In the bidirectional scheme, signal streams are 
combined, and then sent in the FL using the XOR network 
coding protocol, therefore, the spectral efficiency is signifi¬ 
cantly improved compared to the conventional scheme. 

A. Network coding based bidirectional SATCOM 

1) Signal model: In this case, the whole communication 
takes place in four phases. In Phase I, both users transmit 
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TABLE I 

Communication stages for the XOR network coding and the 

CONVENTIONAL SCHEMES. 


Conventional reference scheme 

XOR network coding scheme 

Phase I: Ui and U 2 simultaneously send their signals, si and 

S2, to the satellite while they are overheard by Ei and E 2 , 
respectively. 

Phase II: The satellite passes the received signal to the gateway 
for processing. At the gateway, the users signals are separately 
decoded. 

Phase III: The intended sig¬ 
nal for Ui, decoded S2, is re¬ 
encoded at the gateway and 
the corresponding feed weights 
are designed. Then, the feed 
weights multiplied by the data 
signal are sent to the satellite. 

Phase III: The gateway ap¬ 
plies XOR operation on the 
decoded streams from si and 
S2 to create a merged stream 
of bits and the feed weights 
are designed. Then, the feed 
weights multiplied by the data 
signal are sent to the satellite. 

Phase IV: The satellite passes 
the re-encoded signal through 
the corresponding beam to Ui 
while Ei is listening to it. 

Phase V: The intended sig¬ 
nal for U 2 , decoded si, is re¬ 
encoded at the gateway and 
the corresponding feed weights 
are designed. Then, the feed 
weights multiplied by the data 
signal are sent back to the 
satellite. 

Phase IV: The satellite broad¬ 
casts the merged stream to¬ 
ward the users through the 
corresponding beams which is 
wiretapped by both E\ and 

e 2 . 

Phase VI: The satellite passes 
the re-encoded signal through 
the corresponding beam to U 2 
while E 2 is listening to it. 


signals using different frequencies simultaneously. The signals 
received at the satellite and the eavesdroppers are 


feeder link in Phase II and thanks to the ideal link between 
the satellite and the GW, the same signals as Q and <G are 
present at the GW to be processed. 

At the GW, the received signal is filtered and users’ data are 
separated and decoded into two bit streams denoted by Xi and 
X 2 , respectively. The GW applies the bit-wise XOR algebraic 
operation to the decoded bit streams of the users to get the 
combined stream 


xqw = Xi®X 2 - 


(5) 


Note that before applying the XOR network coding, the GW 
uses zero-padding to add zeros to the shorter bit stream in 
order to make equal length bit streams out of the two different 


bit streams sent by the users |49|, [50]. In Phase III, xgw is 
encoded into saw with unit power, and then multiplied by 
the beamforming vector, w. Using the ideal feeder link, each 
element, WiSGw{t)i °f the produced vector, wsgw- at the GW 
which both includes the feed weight, Wi, and the data signal, 
sow > is transmitted from the GW to the satellite. Since the 
codebook used at the GW to encode xgw can be different in 
the XOR network coding scheme, the RL and FL transmission 
times are generally different for the XOR network coding. This 
enables optimum RL and FL time allocation for the XOR 
network coding. The received signal by satellite is denoted 
as sg = H G w,swsgw. The model sg = H GW gswsgw 
encapsulates the process of transmitting each element of the 
vector wsgvu from the GW to the satellite. Since the feeder 
link is considered to be ideal, H G w/s is a Ng x N$ identity 
matrix. Finally, in Phase IV, each feed weight designed at 
the gateway, which includes the data signal, is applied to 
the corresponding feed at the satellite. Hence, the beams are 
adjusted and the signal sg is broadcast through the antennas. 
The received signals at two users are, respectively. 


ysi = V -Pt/i h(7i ,g Si + ng,) (1) 

y s 2 = VPuMz,s s 2 + ng 2 , (2) 

Vei = \J Pu 1 hu 1 ,E 1 si + ngj, (3) 

11§2 = \/ Pu 2 hu 2 ,E 2 S2 + n E2 , (4) 


where Pjj i is the transmitted power by the users for % =1,2, 
h and h represent the user-eavesdropper and user-satellite 
channels, respectively, and the corresponding source and des¬ 
tination are denoted by the subscript. The channel for the 
satellite is a Ng x 1 vector where Ng is the number of 
the satellite feeds. Additive white Gaussian noises (AWGN) 
are denoted by n and n with n ~ CJ\f(0 , a 2 ) and n ~ 
CA/"(0, <t 2 In s xNs)i respectively. We consider the noise power 
for users, satellite and eavesdroppers as KTB, where K is the 
Boltzman’s constant which is —226.8 dBW/K/Hz, T is the on¬ 
board temperature and B is the carrier bandwidth. We assume 
that si and s 2 are independent and identically distributed 
(i.i.d.) Gaussian random source signals with zero mean and 
unit variance. For convenience, we use the noise variance, 
<t 2 , instead of KTB and omit the bandwidth, B, in the 
rate expressions throughout the paper. Note that we consider 
different temperatures for ground nodes and the satellite. The 
satellite forwards the received signal to the GW using the 


yFL x °R _ hg ^Sg + nUl , (6) 

VU2 XOR = ^ a - r s,u 2 s s + n U 2 - ( 7 ) 

Similarly, the received signals at the eavesdroppers in Phase 
IV are, respectively, 

VEi XOR = ^S,£'i S S' + AEl, (8) 

Ve 2 xor = h s,E 2 S s + ns 2 ■ (9) 


In the following, we shall define the sum secrecy rate. We 
first introduce the users’ rates and eavesdroppers’ channel 
capacities. 

2 ) Users ’ RL rates: Consider 1 1 and t 2 for the RL (Phase I) 
and FL (Phase IV) transmission time, respectively. In Phase I, 
we can characterize the RL rates (R§^, R§^) by the following 


equations 151 Chapter 5]: 


Pu! J < Iu\ L = h log I 1 + 


Ru 2 < Iu 2 = 1 1 log 1 + 


Plh\\ h U lt . 


Pi 


u 2 W7 2 ,S 


( 10 ) 

( 11 ) 


where / denotes channel capacity or the maximum supported 
rate and R is the maximum achievable rate. 
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3) Users’ FL rates: After receiving the FL signal, users 
decode sg. As each user knows its own transmitted bits, 
it can use the XOR operation to retrieve the intended bits. 
Subsequently, using ([ 6 ) and Q, the FL rates can be expressed 
as 


j^FLxor 


tFLxor 

1 U 1 


tFLxor 

1 U 2 


Iu, X °R=t2 log 

Iu 2 LxoR = t 2 log 


|h^w| 2 \ 

°k J 

|h^ 2 w| 2 ^ 

< J 


( 12 ) 

(13) 

(14) 


Since the data for both users have gone through a bit-wise 
XOR operation at the GW and a combined signal is broadcast, 
the GW has to adjust the combined signal’s data rate to match 
both users’ channel capacities. This rate should be equal to 
the minimum FL channel rate between the satellite and the 
users in Phase IV before sending s$ to the satellite. 

4) Eavesdroppers’ channel capacities: Using 0 and 0 , 
the channel capacity from U\ to E\, I§ L , and from satellite 
to Ei, Ig^ XOR , can be expressed, respectively, as 


t rl 

i e 1 


ti log 



Pu^huuE^ 2 ^ 

°k J 


tFLxor 

1 E 1 


h log 


°k J' 


(15) 

(16) 


The channel capacities for E 2 can be derived in a similar way. 

5) Secrecy rate definition: First, we derive the the secrecy 
rate for the RLs and FLs, and then the end-to-end secrecy 
rate. In 1521, the result of 0j| is extended to fading channels 
with multiple-antenna transmitter, receiver, and eavesdropper. 
Using the special case of the result in [52] for single¬ 
antenna transmitter, multiple-antenna receiver, and single¬ 
antenna eavesdropper along with employing ( [TO} and ( p~5| >, the 
secrecy rate for the RL of U\ is calculated as 


SR 


RL 

Ui 


tRL 

1 U 1 


tRL 
1 E 1 ! 


(17) 


where the notation “SR” means “secrecy rate”. 

To calculate the secrecy rate in the FL, first, we derive the 
information that E\ can recover during the RL transmission 
in Lemma Q] 

Lemma 1: Independent of getting a positive or zero secrecy 
rate defined for the RL of U\ in ( fT7| >, E\ cannot recover any 
bits from U 2 transmitted message using the FL transmission. 

Proof: To recover bits from U 2 , E\ has to apply XOR 
operation between the bits recovered from U\ in the RL 
transmission and the bits derived from the satellite broadcast 
in the FL transmission. Hence, the information detected by E\ 
in the FL depends on the bits recovered from U\ in the RL 
transmission. The recovered bits from U\ in the RL depend 
on the sign of the secrecy rate defined in ( fTT| . The sign of the 
RL secrecy rate in ( fT7| has the following possibilities: 

1) If 1“ - > 0, then U\ can establish a perfectly 

secured connection so that the eavesdropper cannot get 
any bits from U\ in the RL (52) . Hence, Ei does not 


have the bits transmitted by U\ in the RL and it cannot 
recover any bits from U 2 using the FL transmission. 

2) If ijjL — Ipjf < 0, then the secrecy rate is zero. There¬ 
fore, U\ cannot establish a secure connection in the RL. 
In this case, U\ remains silent during the corresponding 
time slot. In this time slot, GW generates random bits 
instead of the bits from U\ and applies XOR between 
them and the bits from t/ 2 . As a result, Ej cannot 
recover any bits from U 2 using the FL transmission. 
Note that since the RL time, t±, is always positive and all the 
channels are known, the sign of the expression is 

known prior to the beamformer design. ■ 

A similar argument as in Lemma [T|can be applied to E 2 . 

Consequently, using Lemma |T| the secrecy rate for the FL 
is given in Lemma [2] 

Lemma 2: Assume that there exists at least one RL with a 
positive secrecy rate. Then, the secrecy rate in the FL is given 
as below: 


tFLxor 

1 U 1 


tFLxor 
’ 1 U 2 


} 


SR> 0 , 

SR% > 0 , 


SRFLxor = ; 


tFLxor 

1 U 1 


SR% = 0 , 

SRf% > 0 , 


jFLxor SR RL > 0i 

SRj% = 0 . 

(18) 


Proof: Excluding the case that both RLs have zero secrecy 
rate, i.e., the total secrecy rate is zero, the secrecy rate for the 
FL transmission for different signs of the secrecy rate in the 
RL is given as follows: 

1) If SR§ L > 0 and SR§^ > 0, then according to 

Lemma jl] E-\ and If cannot wiretap any bits from 
U 2 and U-\ , respectively, using the FL transmission. 
Therefore, using the secrecy rate in the FL is 

min {l^ XOR Ju 2 XOR }- 

2) If SR§l > 0 and SR§^ = 0, then according to 
Lemma |T| E\ cannot wiretap any bits from U 2 using 
the FL transmission. Further, since the RL of U 2 is not 
secure, U 2 does not transmit and h '2 does not get any bits 
from I/ 9 . Hence, If cannot recover bits from U\ using 
the FL transmission. Since U\ is not expected to receive 
any message because of SR§^ = 0, the FL secrecy rate 

is l[r T f XOR . 

3) If SR§^ = 0 and SR§^ > 0, similar to the procedure 
as in Case|2j the secrecy rate in the FL is I^ XOR . 

According to the results in Cases |T] [2] and [3] the secrecy rate 
of the FL is derived as in ( fT8j ). ■ 

According to Lemma [2] when the XOR protocol is used, the 
FLs are totally secured. Note that for the Cases [2] and [3] the 
GW creates random bits instead of the message from the user 
with insecure link, i.e., zero secrecy rate in the RL. Then, the 
GW applies XOR between the received message from the user 
which has a positive secrecy rate in the RL and the randomly 
generated bits. This way, the eavesdropper still receives a 
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combined message when the secrecy rate is zero in one of 
the RLs. 

To derive the end-to-end secrecy rate for U\, we invoke 
Theorem 1 in [53], which states that, when decoding and re¬ 
encoding is performed by an intermediate node, the secrecy 
rate of each hop needs to be taken into account as a bottleneck 
to derive the end-to-end secrecy rate. Since decoding and re¬ 
encoding is performed at the GW, the result of Theorem 1 
in 1531 can be applied. Consequently, using the mentioned 
theorem and the secrecy rate derived in ( fT7] > and the result 
of Lemma [2] in the end-to-end secrecy rate for U\ is 
calculated by 


SR™ r = min {Siigf, SR^ KOR } . (19) 

The end-to-end secrecy rate for U 2 can be derived in a similar 
way. The sum end-to-end secrecy rate is expressed as 


SR xor 


= SR 


XOR 

Ut 


+ SR 


XOR 

U 2 


( 20 ) 


B. Conventional SATCOM 

A conventional scheme without using network coding is 
described here as a performance benchmark. 

1) Signal model: As shown in Table [T| the Phases I and 
II are the same for the conventional and the XOR network 
coding schemes, which result in the same signal model for 
both schemes. In Phases III and V, the GW sends back each 
element of the processed S 2 and Si to the satellite, respectively, 
using the ideal feeder link where Si and S 2 are Ns x 1 vectors 
containing both the feed weights and the users’ data signals. 
Si and S 2 are defined as si = wiSi and S 2 = W 2 S 2 , where si 
and §2 are the decoded and re-encoded versions of the data 
signals received from Ui and U 2 at the GW with unit power, 
and Wi and W 2 are beamforming vectors to be designed at the 
GW. Note that since different Gaussian codebooks are used at 
the GW to re-encode the signals for U\ and U 2 , the generated 
signals at the GW are different from those received from the 
users. Therefore, generated signals at the GW are shown by 
si and s 2 - 

The satellite applies each component of the vector S 2 , 
containing the feed weight multiplied by the data signal, to 
the corresponding feed. Then, the beam is adjusted and s 2 is 
sent toward Lj in Phase IV, and the received signals at U\ 
and E\ are, respectively, 

yFLcan _ hg i£/i S2 + nun (21) 

Ve?' O on = h s,B! s 2 + n El ■ (22) 

Similarly, at the end of Phase VI, the received signals at U 2 
and E 2 are, respectively, 

yFL c °„ _ ^ si + nu 2 , (23) 

yFLcan _ h r E2 Si + ue 2 ■ (24) 

The beamformer weights in the conventional scheme are 
exclusively designed at the GW for each user. Hence, when 
data is being transmitted for U\, the satellite’s main lobe is 
focused toward U\. Since E 2 is outside the beam directed 
toward U\ and the beamfomers are designed to maximize the 


signal strength toward U\, E 2 receives the signal from side 
lobes. As a result, the signal received by E 2 is weak. Similar 
conditions hold for Ei when transmitting to U 2 . To make the 
derivation tractable, we neglect these weak signals received by 
E 2 and Ei in Phases IV and VI, respectively. As a result, the 
sum secrecy rate derived for the conventional scheme shall be 
an upper-bound. 

2) Users’ rates: The RL rates for the conventional SAT¬ 
COM are the same as the XOR network coding scheme in ( fi7j| ) 
and O- Using ( |2 1 [ 1 and ( |23j ), the FL rates to Lj and U 2 after 
self-interference cancelation can be derived, respectively, as 


tFLco 

L lh 


tFLco 

L U 2 


= t 2 log 2 j 

l 1 + 

I tl s,ir 1 w 2| \ 

(25) 

< ) ' 

= *3 log 2 1 


l h s,u 2 w i| 2N j 

(26) 


’U 2 


In order to make the conventional method comparable to the 
bidirectional one, we assume that the total available transmis¬ 
sion time for both the network coding and the conventional 
schemes are the same. In other words, the RL time for the users 
is ti and the FL for Ui and U 2 are t 2 and £3 = 1 — ti — f 2 , 
respectively. 

3) Eavesdroppers’ channel capacities: The RL capacities 
for Ei and E 2 in the conventional SATCOM are the same 
as the ones derived for the XOR network coding scheme. 
Using ( |22| ) and ( |24| >, the FL capacity from the satellite toward 
Ei and E 2 to overhear the signals sent in Phases IV and VI, 
respectively, are 


jFL c , 

1 E 1 


Ie 2 c ° 


1 2 log 2 


h log 2 



h S,B-, W 2| 2 \ 

)' 

h S,E 2 W l|"\ 

y 


(27) 

(28) 


4) Secrecy rate definition: The RL secrecy rate for Ui 
and U 2 are the same as the XOR network coding scheme 
in Section II-A5 In the conventional scheme, the messages 
that E\ receives in the RL and FL are different and can be 
decoded independently. Hence, the FL secrecy rate for Ui can 
be defined using ( |25j ), ( |27j ) and the result from [[52) as 


SR%°° 


= 1 , 


FL C 

Ui 


- I 


FL C 
E 1 


(29) 


Utilizing and Theorem 1 in |[53), the end-to-end 

secrecy rate for U\ is derived as 


SR$° n = mm 


■"{ 


c e }RL q jdFLqo 
on Ul , on U2 


1 


(30) 


The end-to-end secrecy rate for U 2 can be defined in a similar 
way. Like in Section II-A5 the sum secrecy rate is 


O nC on n nC on 

o n — * 2 ) 


SR 


•Con 
U 2 • 


(31) 


III. Problem Formulation and the Proposed 
Solution 

In this section, we study the problem of maximizing the 
sum secrecy rate by optimizing the precoding vectors at the 
GW to shape the satellite beams along with the RL and FL 
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time allocation, given the maximum available power P$ at 
the satellite. We consider both the XOR network coding and 
the conventional schemes. For the XOR network coding, we 
just solve the optimal beamformer design for the secrecy rate 
derived from the first case of the FL secrecy rate in ( p~8j ). The 
solutions for the optimal beamformer design for the other two 
cases of (p~8]> are similar to the first case of (p~8|). 


A. Network coding for bidirectional SATCOM 

Using the sum secrecy rate defined in ( [20] ), the optimization 
problem for the XOR network coding scheme is defined as 


max 

min{/“ - 

tRL 
1 E 1 ■ 

min {l^ XOR ,I^ XOR }} 

+ min • 

f tRL tRL 

YU 2 - 1 E 2 5 

min * 

J tFLxor tFLxor \ \ 

YUi ’ 2 U 2 // 

s.t. 

t\ + 1 2 = 1, 
ll w H 2 < Ps 


(32) 


To transform ([32]) into a standard convex form, we apply 
the following procedures. First, we assume that t\ and i 2 are 
fixed and study the beamforming design. After designing the 
optimal beamformer, the optimal time allocation is found by 
performing 1-D search of t\ over the range (0,1). Second, 
after considering a fixed transmission time for the RL and FL, 
the RL secrecy rate expressions in {32] are fixed and can be 
dropped without loss of generality. Hence, {32] boils down 
into 

max min |/^ Lxob , l[,^ XOR j 

s.t. ||w|| 2 < P s . (33) 

Next, we introduce the auxiliary variable u to remove the 
“min” operators. Then, {33] yields 

max u 

w,u>0 

S.t. ||w|| 2 < P s , 

Otfi ( 2 ^ - i) < Ihs.t/i^l 2 , 

a u 2 ( 2 ^ - i) < \ h s,u 2 ™?\ 2 - (34) 

The last two constraints in {34] are not convex. By introducing 
W = ww H , we rewrite ([34] as 

max u 

W^0,ii>0 

s.t. tr(W)<Ps, 

< ( 2 ^ - 1 ) <tr(WA), 

4 2 (-l) <tr(WB), (35) 

where A = htj hg v and B = htj U:> h E v . The rank 
constraint, rank (W) = 1, in {35] is dropped. The optimal 
beamforming weight in ( [35] is designed for the FL trans¬ 
mission. However, since the RL secrecy rates, which can 
be bottlenecks for the total end-to-end secrecy rate, are not 
considered in {35}, extra unnecessary power at the satellite 


may be utilized. To fix this, one last constraint is added to ([35} 
to get 


max u 
W^0,n>0 

s.t. tr (W) < Ps, 

4 h ( 2§ -l) <tr(WA), 

4 2 ( 2 ^-i) — tr (WB), 

u< max {Ig-Igjg-Ig}. (36) 


Problem ( [36] is recognized as a SDP problem, thus convex 
and can be efficiently solved. According to Theorem 2.2 
in (54), when there are three constraints on the matrix variable 
of a SDP problem such as {36}, existence of a rank-1 optimal 
solution for Ns > 2 is guaranteed. Hence, if the solution 
to {36] happens not to be rank-one, we can use Theorem 2.2 
in (54) to recover the rank-one optimal solution out of a non- 
rank-1 solution. 

According to |55) , the complexity of problem {36] is 


O 



'Nl(Nl + l) 



(37) 


Solving <E} is accompanied along with a 1-D exhaustive 
search over the time variable t. We assume that the time 
variable is divided into m bins between 0 and 1. The overall 
computational complexity for designing the beamformer for 
the XOR network coding scheme is m times the complexity 
mentioned in {37}. This is typically affordable since the 
optimization is performed at the GW on the ground. 


B. Conventional SATCOM 

According to the secrecy rate defined in {31} , the optimiza¬ 
tion problem for the conventional scheme is 

w,S, l2 min{/“ -1%°°*} 

+ min { I™ - - C c “" } 

s.t. ||wi|| 2 + ||w 2 || 2 < P S - (38) 

Assume that the power split between the beamforming vectors 
wi and W 2 is /3Ps and (1 — fj) Pg where /3 is a given 
parameter with 0 < /3 < 1. Using the parameter If the 
beamforming vectors W! and w 2 in the power constraint 
of {38] can be separated. Hence, {38] can be rewritten as 

max min ( I$ L - /| L , ) 

Wi.W2.ti.t2 l Ul ’ U * E2 J 

+ min{7“ - 

s.t. ||wi|| 2 < fP s , 

||w 2 || 2 <(1 -P)P S . 


( 39 ) 



The problem (|39| can be expanded as 


operators as 


max min 

Wi,W2,tl,t2 



+ min 



*3 log 


, t 2 log 



( a E 1 a lh + 

^1, + 


< + |h^ 2 W 1 l 2 \| 

CT I 2 + ! h s,B 2 w il 2 / J 

|h^w 2 | 2 \) 

\ h S,E™2\ 2 ) J 


s.t. ||wi|| 2 < /3P S , 

||w 2 || 2 < (1-/3)P s . (40) 


Before further simplifying ( |40| ), we first mention the following 
theorem. 

Theorem 1: If the achievable secrecy rate is strictly greater 
than zero, the power constraints in ( |40| > are active at the 
optimal point and w£, i.e., ||wi|| 2 = (3Ps and ||'w 2 1| 2 = 

(1 -P)Ps- 

Proof: The proof is given in Appendix [A] ■ 

Using Theorem [T] we can show that the constraints in ( ftO) 
are active which enables us to write (|40]> as 


max 

ti,t2,Ui,lL2 

Ml + M 2 


S.t. 

Ml < t\C, 

(43a) 


Ml < t 2 log ( —f^A max (C)^ , 

(43b) 


U 2 < t\d, 

(43c) 


U 2 < h log ( —f^-Amax (D)^ , 
V (J Ui / 

(43d) 


Ml, M 2 > 0, 

(43 e) 


0 < fi < 1,0 < t 2 < 1 , 

(43f) 


where 


c = log 


1 + 


njil|nj/ liS || 


1 + 


ru-i | '*■£/! ,E\ | 


, d = log 


1 + 


-u 


1 + 


U 2 j n U 2 ,E 2 I 
<2 


(44) 


and U = 1 t\ t‘ 2 - Clearly, it is a linear programming 
problem and can be optimally solved. After that, we use 1-D 
search to find the optimal power allocation parameter j3*. 


max min Iff - Iff , t 2 log 

Wi,W2,tl,*2 1 


E 2 W f U 2 Wj \ 

f E 2 wi J 


’u 2 


3 log 


l e 2 


El wf Uiw 2 \ 

EiW 2 J 


<J U 1 W 2 


s.t. II Will 2 = /3P S , 


IIw 2 1| 2 = (1 — /3) P s , 


(41) 


where Ui = 

h s,.E 2 1:1 s,.E 2 ' 


“ u i T _| 
(l-/3)Ps 4 

A a »t 1 
" (l-/3)Ps J 


h* h T 

n s,u 1 n s,u 1 


,U 2 4 


V s , El hl El ,V 2 4 


PPs 1 


PPs 


The benefit of ( |4l| ) is that given /3, wi and w 2 can 
be optimized separately. To be specific, the optimal Wi 
and w 2 corresponds to the eigenvectors associated with the 
maximum eigenvalues of matrices C = L[ 1 U| L-, n and 
D = LT 1 U 2 L^ ff where E x = L x Lf and E 2 = L 2 Lf, 
respectively. As a result, (|4Tj) can be simplified into 


max 

0<ti<l 

0<t 2 <l 


min 



t rl 

1 E 1 


f 2 log( ^A max (C) 


’u 2 


+ min 



- Iff, 1 3 log 


} E 1 

T 2 ’ 
T Pi 



(42) 


Note that the constraints of ( |4T| ) are dropped in ( |42| due to 
the homogeneity of the objective function. To solve ( |42| >, we 
introduce auxiliary variables as ui and u 2 to remove the “min” 


IV. Simulation Results 


In this section, we present numerical results to evaluate 
the secrecy rate of the XOR network coding based SATCOM 
protocol and compare it with the conventional scheme. We 
consider both i) equal RL and FL time allocation (ETA), 
and ii) optimized time allocation between the RL and the FL 
(OTA). We use labels “XOR-ETA” and “XOR-OTA” to denote 
equal time allocation and optimal time allocation policies, 
respectively. 

In our simulations, B denotes the carrier bandwidth, 41.67 
kHz, for both RL and FL transmissions. Since there is a main 
direct link from the satellite to the users as well as some diffuse 
components, the channel from the satellite to the users can be 
modeled as Rician (56). The I\ -factor for the FL is determined 
by the multipath average scattered power and random log¬ 
normal variable using the values provided by (56) . Due to 
the “scintillation” effect we have multipath in the RL. 
Moreover, there exists a direct link like the FL case. Therefore, 
the RL can be considered to follow Rician distribution with 
a higher K-factor which is assumed to be 15 dB. The rest 
of the link parameters are summarized in Table [II] (58) . The 
satellite’s FL transmission power in Table |H| shows the carrier 
power used in the following transmissions: 1) the broadcast 
in Phase IV of the XOR scheme or, 2) the transmissions in 
Phases IV and V of the conventional reference scheme. If 
the satellite’s FL transmission power is not a variable in a 
simulation scenario, its value provided by Table [II] is used. 

The ground channels between the users and the eavesdrop¬ 
pers are assumed to follow a Rayleigh distribution with the 
pathloss calculated by 


L = 10 log 



2 


d? 


(45) 
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TABLE II 

Link budget and parameters 


Parameter 

Value 

Satellite orbit type 

LEO 

Operating band (1 ~2 GHz) 

L-band 

RL and FL frequency band, MHz 

1616-1626.5 

Beams on the Earth 

48 

Number of antenna arrays 

318 

Frequency reuse factor (FRF) 

12 

Number of carriers per beam 

20 

Carrier bandwidth, B c , kHz 

41.67 

Guard bandwidth, kHz 

2 

Satellite’s antenna gain per beam, dBi 

24.3 

Total power at the satellite, dBW 

31.46 

Satellite noise temperature, K 

290 

Terminal noise temperature, K 

321 

Satellite’s FL transmission power, dBW 

7.65 

Mobile device radiation power, dBW 

0 

Mobile device antenna gain, dBi 

3.5 

Return and forward link pathloss, dB 

151 

Doppler shift due to satellite velocity, Hz 

270 

Envelope mean of the direct wave, m s 

0.787 

The variance of the direct wave, a~. 

0.0671 

The power of the diffuse component 

0.0456 


where 7 is the pathloss exponent which we assume to be 
7 = 3.7. The maximum Doppler shift is calculated using the 
following relation as 


, _ v = v f c 

J Drnax ^ ^ 7 


(46) 


where v is the user’s speed, f c is the maximum frequency used 
and c is the light speed. 

Since the carrier bandwidth is 41.67 kHz, we assume that 
the RL operating bandwidth is 1616—1616.04167 MHz for U\, 
1616.04367 — 1616.08534 MHz for U 2 and the FL operating 
bandwidth is 1616 — 1616.04167 MHz which is common 
between the users. Each user is supposed to move in a random 
direction with a 10 m/s speed. If not explicitly mentioned, 
each eavesdropper’s distance to the user is randomly changed 
between 2 to 2.5 km. 

We first show the average sum secrecy rate in Fig. [2] 
when the number of feeds used on the satellite varies from 
3 to 10. As we can see, the XOR network coding scheme 
can achieve over 54% higher average sum secrecy rate than 
the conventional one. It can be observed that optimizing the 
RL and FL communication times improves the average sum 
secrecy rate for both schemes considerably, especially for the 
conventional scheme in higher number of feeds. 

The effect of time allocation is further illustrated in Figs. [3] 
and [4] for the XOR network coding and the conventional 
schemes, respectively. It is observed in Fig. [3]that for different 
number of feeds, the average sum secrecy rate first increases, 
and then then decreases with the RL time allocation t\. Here, 
more time is allocated to the RL transmission which means 
that the FL transmission rate is a bottleneck for the end-to- 



Fig. 2. Average sum secrecy rate versus different number of feeds on the 
satellite for the XOR network coding and conventional schemes. 


xlO 5 



Return link transmission time, t 


Fig. 3. Average sum secrecy rate versus the RL time allocation t\ in the 
XOR network coding scheme. 



Fig. 4. Average sum secrecy rate versus different RL, £i, and FL, £2 and 
£3 = 1 — t\ — £2 , time allocation in the conventional scheme. 
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Satellite's forward link transmission power, (watt) 

Fig. 5. Average sum secrecy rate versus the satellite’s forward link 
transmission power. 



Return link transmission time, t 


Fig. 8. Average sum secrecy rate versus different RL and FL time allocation 
in XOR network coding scheme for different distances between the user and 
eavesdropper. 


xlO 5 



Fig. 6. Average sum secrecy rate versus RL time allocation for different 
satellite’s forward link transmission powers. 



Distance from user to eavesdropper, d (m) 

Fig. 7. Average sum secrecy rate versus the distance between the user and 
the eavesdropper for XOR network coding and conventional schemes while 
equal and optimal time allocation are employed. 


end rate. The time split between the RL and FL depends on 
the number of feeds at the satellite. As the number of feeds 
increases, the time devoted to the FL transmission increases. 
This shows that the FL acts as a bottleneck for the end-to-end 
communications. The change in the RL and FL time allocation 
makes the channel secrecy rates closer to each other so that 
the overall average secrecy rate increases. The optimal time 
allocation for one RL slot and two FL slots in the conventional 
scheme can be seen in Fig. [4] 

The effect of the satellite’s FL transmission power on the 
average secrecy rate is investigated in Figs. [5] and [6] In 
Fig. [5] we see that the average secrecy rate for the equal time 
allocation approach in both schemes starts to saturate as the 
available power for the FL transmission increases. This can 
be explained by the fact that as the available power increases, 
the RL becomes a bottleneck for the end-to-end secrecy rate 
and hinders the overall improvement. On the other hand, 
while performing optimal time allocation over RL and FL, the 
average secrecy rate keeps growing for both the conventional 
and the XOR network coding schemes. It is seen in Fig. [6]that 
by increasing the power at the satellite, more time is allocated 
to the RL transmission in order to balance the RL and FL 
secrecy rates and sustaining the secrecy rate growth. However, 
after increasing the satellite’s power beyond a specific point, 
the effect of the optimal time allocation fades out, and the 
average secrecy rate in the optimal time allocation scheme 
also saturates due to RL being a bottleneck. This fact can 
be observed in Fig. [6] As the power of the FL transmission 
increases, less time is exchanged between the RL and FL 
transmission and the average secrecy rate saturates. 

The effect of the distance between each user and the 
corresponding eavesdropper is investigated in Figs. [7] and [8] 
As is seen in Fig. [7] the average secrecy rate for equal time 
allocation in both schemes saturates as the distance between 
the user and eavesdropper increases. This is because increasing 
the distance to the eavesdropper improves the secrecy rate in 
the RL, leaving the FL as a performance bottleneck. When 
the time allocation is optimized, the average secrecy rate 
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shows notable gain in both schemes. However, after a specific 
distance, the secrecy rate for the optimal power allocation 
also saturates. Increasing the distance to the eavesdropper 
increases the secrecy rate for the RL, but this increment 
is going to be quite small at some point and consequently 
vanishes. Consequently, as the distance increases, less time 
exchange is required between the RL and FL transmission. 
This fact can be seen in Fig. [8] Due to this limit in the RL 
secrecy rate, the secrecy rate can be improved using optimal 
time allocation up to a limited distance. Furthermore, as it is 
observed in Fig. [7] the average sum secrecy rate of the XOR 
network coding saturates in a much longer distance compared 
to the conventional scheme. Interestingly, when the user and 
the eavesdropper are close, the conventional scheme using the 
optimal time allocation outperforms the XOR network coding 
scheme using equal time allocation. This originates from the 
fact that there are more degrees of freedom in terms of 
optimal time allocation in the conventional scheme compared 
to the XOR network coding scheme. Hence, when it comes 
to picking up a secure protocol, distance plays an important 
role. 

The results in Fig. [8] illustrate that as the distance between 
the user and the eavesdropper decreases, more time is allocated 
to the RL transmission of the XOR network coding scheme in 
order to balance the secrecy rates in RL and FL. It is observed 
that as the distance to the eavesdropper increases, less change 
is required in the RL and FL times. This is due to the fact that 
as the distance increases, the improvement rate in the secrecy 
rate of the RL is reduced and less regulation is required in the 
transmission times. 


V. Conclusion 

Network coding principle has been known to increase the 
throughput of bidirectional SATCOM. In this paper, we studied 
the use of XOR network coding to improve the sum secrecy 
rate of bidirectional SATCOM. The beamforming vector as 
well as the optimal time allocation between the RL and the 
FL were optimized to improve the secrecy rate. We compared 
the sum secrecy rate of the XOR network coding with the 
conventional scheme without using network coding regarding 
realistic system parameters. Our results demonstrated that the 
network coding based scheme outperforms the conventional 
scheme substantially, especially when the legitimate users and 
the eavesdroppers are not close. 

Appendix A 
Proof of TheoremQ] 

Proof: In the objective function of problem ( |40| , only 
the second argument of the “min’' operators, FL secrecy rates, 
include the beamforming vector. Hence, we focus on these 
terms in our optimization. Using contradiction, we shall show 
that ||wjj| 2 = /3Ps and 11W 2 11 2 = (1 — /3) Ps must hold for 
the optimal solutions wj and wj. Assume that wj and wj are 
the optimal solutions to ( [40] ) and satisfy ||W! || 2 < f3P s and 
||W 2 1| 2 < (1 — /3)Ps, then there exist constants a\ > 1 and 
«2 > 1 that satisfy 11 w*11 2 = /3Ps and || W 2 1| 2 = (1 — /?) Ps 
where wj = aiwj and wj = a^wj. Replacing wj by wj 


and wj by wj in the FL secrecy rates of the objective in ( |40| , 
we get 


h (<*i) = t 2 log 


/2 (a 2 ) = h log 


' °\ 2 °u 2 +Qil h s,cr 2 w *l 

°u 2 ° 2 E 2 + a il h s,£ 2 w tl 

2 ^2 


°£i a Ui 




’Ui U E X 


11 hs, Ei 1 


,*|2 


(47) 


Also, we assume that in the RL and FL of each user the secrecy 
rate is nonzero which translates into 


a E 2 { a U 2 + l h S,t/2 W lli > a U 2 ( a E 2 + l h S,£ 2 Wl | 2 ) >3wi, 

(48) 

a E! ( a lh + |lLs,Ui W 2|“) > &Ui (^ii + |hs,.E 1 w 2| 2 ) )3 w 2 . 

(49) 

According to the conditions in ( |48j ) and ( [49] ), we can see that 
fi(a) and / 2 (a) are monotonically increasing functions in 
the parameters ot\ and a 2 . This contradicts that wj and wj 
are the optimal solutions. Since adjusting the RL and FLs 
transmission time balances the RL and FL secrecy rates, the 
RL bottleneck does not limit the FL secrecy rate increment. 
Hence, the power constraint should be active. This completes 
the proof. ■ 
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